Merge branch 'main' into docs/invariant-test-docs-609

Author: edehvictor

.codex

@@ -4,6 +4,21 @@
 
 This implementation adds nonce-based replay protection to operator-authorized actions in the Stellar smart contract, preventing replay attacks and ensuring that operator actions can only be executed once.
 
+## Developer Quick Reference
+
+### Nonce lifecycle
+
+1. Read the next expected nonce with `get_operator_nonce(operator)`
+2. Submit the signed operator action with that exact nonce
+3. Contract accepts once, increments stored nonce, and emits `NonceIncrementedEvent`
+4. Reusing old nonce returns `StaleNonce`; skipping ahead returns `InvalidNonce`
+
+### Recommended client flow
+
+- Treat nonce as on-chain state (not local-only state)
+- Re-fetch nonce right before signing every operator action
+- After a nonce error, re-read nonce before retrying
+
 ## Changes Made
 
 ### 1. Storage Key Addition (`stellar-contracts/src/lib.rs`)

.kiro/steering/css-tokens.md

@@ -77,6 +77,9 @@ The `FiatBridge` contract exposes read-only views intended for operational dashb
 - **AI Integration**: Google Generative AI assistant
 - **Fiat Payout**: Paystack API (Nigerian bank transfers)
 
+### 4. Admin Authentication Architecture
+The admin dashboard and administrative actions rely on an on-chain root of trust. The `AdminGuard` component in the Next.js app fetches the configured admin address directly from the smart contract using `getAdmin()`. All administrative write operations require cryptographic signatures matching this address, ensuring front-end role spoofing is impossible. For a detailed architectural breakdown, see the [FiatBridge Contract README](stellar-contracts/FIAT_BRIDGE_README.md#admin-authentication-architecture).
+
 ## Tech Stack
 
 | Layer | Technology | Purpose |
@@ -100,6 +103,8 @@ DEX-CHAT converts crypto to fiat through an AI-guided conversation flow. The end
 
 The user connects their Freighter wallet and tells the AI assistant they want to offramp a token amount. The frontend builds a Soroban `deposit` transaction that transfers the specified token from the user's Stellar account into the `FiatBridge` contract. The contract validates the deposit against oracle-sourced prices, enforces slippage limits, checks per-token and daily deposit caps, and records a `Receipt` with a unique memo hash.
 
+For maintainers: how slippage BPS and the on-chain threshold interact is documented in [docs/slippage-threshold.md](docs/slippage-threshold.md).
+
 ### 2. Escrow (on-chain hold)
 
 Deposited funds are held in the smart contract's escrow. A withdrawal request is queued with a risk tier that determines the timelock duration — higher-value or higher-risk withdrawals wait longer before they can be executed. During this period the admin dashboard provides real-time metrics (queue depth, oldest request age, accrued fees) so operators can monitor the pipeline.

.vscode/extensions.json

@@ -28,3 +28,6 @@ GEMINI_API_KEY=your_gemini_api_key_here
 
 # Admin secret for accessing reconciliation and audit log endpoints.
 ADMIN_SECRET=your_admin_secret_here
+
+# Sentry DSN for error tracking and monitoring
+NEXT_PUBLIC_SENTRY_DSN=

.vscode/settings.json

@@ -1,7 +1,15 @@
-import type { NextConfig } from "next";
+import type { NextConfig } from 'next';
+import { withSentryConfig } from '@sentry/nextjs';
 
 const nextConfig: NextConfig = {
   /* config options here */
 };
 
-export default nextConfig;
+export default withSentryConfig(nextConfig, {
+  org: process.env.SENTRY_ORG,
+  project: process.env.SENTRY_PROJECT,
+  silent: !process.env.CI,
+  widenClientFileUpload: true,
+  tunnelRoute: '/monitoring',
+  disableLogger: true,
+});